coinbase-pro-digital[.]wstd[.]io

PhishDestroy identifies coinbase-pro-digital.wstd.io as a confirmed brand impersonation threat specifically targeting Coinbase, a leading cryptocurrency exchange. This domain was designed to deceive users into believing they were accessing the legitimate Coinbase Pro platform, thereby facilitating credential theft and potential financial loss. The threat type is classified as brand impersonation with a high risk level, indicating sophisticated attempts to mimic the official site.

Technical indicators provide a clear picture of the domain's malicious nature. VirusTotal analysis shows 16 out of 95 security vendors flagging the domain as malicious, and it appears on three security blocklists. The domain was created on February 21, 2026, and resolves to IP address 104.19.164.34. It uses a Let's Encrypt SSL certificate (E8), which is common among phishing sites due to its free availability. Google Safe Browsing flags the site as phishing, reinforcing its dangerous status. The page title, "Official Site® | Coinbase Pro | Digital Asset Exchange®," is a direct attempt to mislead users into believing it is authentic.

As of the latest assessment, the domain is offline, suggesting that security measures have been taken to neutralize the threat. However, users should remain vigilant as similar domains may appear. PhishDestroy advises Coinbase users to always verify URLs before entering credentials or performing transactions. Avoid clicking on unsolicited links and use official channels to access cryptocurrency platforms. If you have interacted with this domain, change your Coinbase credentials immediately and enable two-factor authentication to mitigate risk.